Cut-Free ExpTime Tableaux 
for Checking Satisfiability of a Knowledge Base 
in the Description Logic SHI 



Linh Anh Nguyen 

Institute of Informatics, University of Warsaw 
Banacha 2, 02-097 Warsaw, Poland 
nguyen@mimuw . edu . pi 
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cision procedure for checking satisfiability of a knowledge base in the 
description logic ST-LX, which extends the description logic ACC with 
transitive roles, inverse roles and role hierarchies. 

Keywords: description logics, automated reasoning, tableaux, global 
caching. 

1 Introduction 

Ontologies provide a shared understanding of the domain for different appli- 
cations that want to communicate to each other. They are useful for several 
important areas like knowledge representation, software integration and Web 
applications. Web Ontology Language (OWL) is a layer of the Semantic Web 
architecture, built on the top of XML and RDF. Together with rule languages 
it serves as a main knowledge representation formalism for the Semantic Web. 
The logical foundation of OWL is based on description logics (DLs) . Some of the 
most well-known DLs, in the increasing order of expressiveness, are ACC, STi, 
SHI, SH2Q and SKOTQ [TT7] . 

Description logics represent the domain of interest in terms of concepts, in- 
dividuals, and roles. A concept is interpreted as a set of individuals, while a 
role is interpreted as a binary relation among individuals. A knowledge base in 
a DL consists of axioms about roles (grouped into an RBox), terminology ax- 
ioms (grouped into a TBox), and assertions about individuals (grouped into an 
ABox). One of the basic inference problems in DLs, which we denote by Sat, 
is to check satisfiability of a knowledge base. Other inference problems in DLs 
are usually reducible to this problem. For example, the problem of checking con- 
sistency of a concept w.r.t. an RBox and a TBox (further denoted by Cons) is 
linearly reducible to Sat. 

In this paper we study automated reasoning in the DL ST-LT, which extends 
the DL ACC with transitive roles, inverse roles and role hierarchies. The aim is 
to develop an efficient tableau decision procedure for the Sat problem in ST-LX. It 
should be complexity-optimal (ExpTime), cut-free, and extendable with useful 
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optimizations. Tableau methods have widely been used for automated reason- 
ing in modal and description logics 2 since they are natural and allow many 
optimizations. As SHI is a sublogic of SIZOIQ and REG C (regular grammar 
logic with converse), one can use the tableau decision procedures of SIZOIQ [7] 
and REG C [16] for the Sat problem in SHI. However, the first procedure has 
suboptimal complexity (NExpTime when restricted to SHI), and the second 
one uses analytic cuts. 

The tableau decision procedure given in [8] for the Cons problem in SHI has 
NExpTime complexity. In [J] together with Gore we gave the first ExpTime 
tableau decision procedure for the Cons problem in SHI, which uses analytic 
cuts to deal with inverse roles. In [15] together with Szalas we gave the first 
direct ExpTime tableau decision procedure for the Sat problem in the DL SH. 
In [11] we gave the first cut-free ExpTime tableau decision procedure for the 
Sat problem in the DL ACCI. 

In this paper, by extending the methods of [4115111] . we give the first cut- 
free ExpTime (optimal) tableau decision procedure for the Sat problem in the 
DL SHI. We use global state caching [5|6|llj . the technique of [11] for dealing 
with inverse roles, the technique of [4|15j for dealing with transitive roles and 
hierarchies of roles, and the techniques of [15|14|16|llj for dealing with ABoxes. 

The rest of this paper is structured as follows: In Section [2] we recall the 
notation and semantics of SHI. In Section [3] we present our tableau decision 
procedure for the Sat problem in SHI. In Section [4] we give proofs for the 
correctness of our procedure and analyze its complexity. Section [5] concludes 
this work. 

2 Notation and Semantics of Sl-LX 

Our language uses a finite set C of concept names, a finite set R of role names, 
and a finite set I of individual names. We use letters like A and B for concept 
names, r and s for role names, and a and b for individual names. We refer to A 
and B also as atomic concepts, and to a and b as individuals. 

For r G R, let r~ be a new symbol, called the inverse of r. Let R = {r~ 
r G R} be the set of inverse roles. For r G R, define = r. A role is any 

member of R U R~ . We use letters like R and S to denote roles. 

An (SHI) RBox 1Z is a finite set of role axioms of the form R C S or 
R o R IZ R. By ext(7Z) we denote the least extension of IZ such that: 

- R C R G ext(lZ) for any role R 

- if R C S G ext(K) then R~ C S~ G ext{1Z) 

- if i? o i? Z i? g ext(lZ) then R~ o R~ C R~ G ext(K) 

- if R C S G ext(K) and SCTe e:ri(7e) then i? C T G extijl). 

By i? C K 5 we mean R C 5 G ext(R). If i? C K £ then i? is a subrole of 5 
w.r.t. 7?.. If i? o R IZ i? G ext(7l) then i? is a transitive role w.r.t. IZ. 
Concepts in iSHI are formed using the following BNF grammar: 

C, D ::= T | _L | A | ^C \ C n L> | C U L> | ViLC | 3i?.C* 
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We use letters like C and D to denote arbitrary concepts. 

A TBox is a finite set of axioms of the form C C D or C = D. An A Box 
is a finite set of assertions of the form a:C (concept assertion) or R(a,b) (role 
assertion) . A knowledge base in iS"HX is a tuple (72, X, .A), where 72. is an RBox, 
T is a TBox and A is an ABox. 

A formula is defined to be either a concept or an ABox assertion. We use 
letters like <p, ip and £ to denote formulas, and letters like X, Y and X to denote 
sets of formulas. 

An interpretation X = (A x , x ) consists of a non-empty set A x , called the 
domain of X, and a function • , called the interpretation function of X, that maps 
every concept name A to a subset A x of Zi 1 , maps every role name r to a binary 
relation r x on A x , and maps every individual name a to an element a x £ Zi 1 . 
The interpretation function is extended to inverse roles and complex concepts 
as follows: 

(r-) x = {(x,y) | (y,x) € r 1 } T x = Z\ x JL 1 = 

= Zi 1 \ C x (C n 7J) 1 = C x nD x (C U 7J) X = C X UD X 
(VR.C) X = {x E A x Vy[(x,y) S i? 1 implies y G C 1 ] } 
(Bfi.C) 1 = {i G Z\ x I 3y[(x, y) £ i? 1 and y € C 1 ] } 

Note that (r~) x = (r 1 ) -1 and this is compatible with (r~)~ = r. 

For a set 7" of concepts, define F x = {x E A x | x E C x for all C E T}. 

The relational composition of binary relations Ri , R2 is denoted by Ri o R 2 . 

An interpretation I is a model of an RBox 1Z if for every axiom RC5 (resp. 
7? o R C R) of K, we have that R x C 5 1 (resp. R x o R x E R x ). Note that if X 
is a model of 72. then it is also a model of ext(lZ). 

An interpretation I is a model of a TBox T if for every axiom CCD (resp. 
C = 7J) of r, we have that C x C 7J 1 (resp. C 1 = 7J 1 ). 

An interpretation X is a model of an ABox A if for every assertion a : C (resp. 
R(a, b)) of A, we have that a x E C x (resp. (a x , b x ) E R x ). 

An interpretation X is a model of a knowledge base (72-, X, A) if X is a model 
of all TZ, T and A. A knowledge base (1Z, T, A) is satisfiable if it has a model. 

An interpretation I satisfies a concept C (resp. a set X of concepts) if C x 7^ 
(resp. A 1 7^ 0). A set X of concepts is satisfiable w.r.t. an RBox 1Z and a TBox 
T if there exists a model of 1Z and X that satisfies X. For X = Y U A, where 
Y is a set of concepts and A is an ABox, we say that X is satisfiable w.r.t. an 
RBox 1Z and a TBox T if there exists a model of (1Z, X, -4) that satisfies X. 

3 A Tableau Decision Procedure for Sl-LI 

We assume that concepts and ABox assertions are represented in negation nor- 
mal form (NNF), where -1 occurs only directly before atomic concepts!]] We use 
C to denote the NNF of -iC, and for tp = a : C, we use Tp to denote a : C. For 



1 Every formula can be transformed to an equivalent formula in NNF. 
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simplicity, we treat axioms of T as concepts representing global assumptions: 
an axiom C C D is treated as C U D, while an axiom C = D is treated as 
(C U D) n (5 U C). That is, we assume that T consists of concepts in NNF. 
Thus, an interpretation I is a model of T iff Z validates every concept C G T ■ 
As this way of handling the TBox is not efficient in practice, the absorption tech- 
nique like the one discussed in [12115] can be used to improve the performance 
of our algorithm. 

From now on, let (JZ, T, ^4) be a knowledge base in NNF of the logic SHI, 
with A ^ 0.0 In this section we present a tableau calculus for checking satisfia- 
bility of (11, T, A). 

For a set X of concepts and a set Y of ABox assertions, we define: 

SRTR TC (i?, S) = (R\Z n S AS o S \Z S E ext(TZ)) 
Trans TC (A:, R) = {D VR.D EX}U {VS.D G X \ SKTR K (R, S)} 
Trans K (X,i?,a) = {a:D\ VR.D G X}U {a:\fS.D \ VS.D G X A SRTR K (i?, S)} 
Trans TC (Y>,.R) = {D \ a:VR.D G Y} U {VS.D \ a:VS.D G Y A SRTR^(i?, S)} 
Trans K (Y,a,i?,6) = {b:D \ a:VR.D G Y} U 

{b-yS.D | a:V5'. J D G Y A SRTR K (i?, S 1 )} 

We call Trans7j(A", i?) the transfer of X through R w.r.t. TZ, call Trans^(AT, R, a) 
the transfer of X through R to a w.r.t. 1Z, call Trans7j(Y", a, R) the transfer of 

Y starting from a through R w.r.t. 1Z, and call Trans7j(Y, a, R, b) the transfer of 

Y from a to b through R w.r.t. 1Z. 

In what follows we define tableaux as rooted "and-or" graphs. Such a graph 
is a tuple G — (V, E, v), where V is a set of nodes, E C V x V is a set of edges, 
v G V is the root, and each node v G V has a number of attributes. If there is 
an edge (v, w) G E then we call v a predecessor of iy, and call w a successor of v. 
The set of all attributes of v is called the contents of v. Attributes of tableau 
nodes are: 

— Type(v) G {state, non-state}. If Type(v) = state then we call v a state, else 
we call v a non-state (or an internal node). If Type(v) = state and (v, w) G E 
then Type(w) = non-state. 

— SType(v) G {complex, simple} is called the subtype of v. If SType(v) = 
complex then we call v a complex node, else we call v a simple node. The 
graph never contains edges from a simple node to a complex node. If (v,w) 
is an edge from a complex node v to a simple node w then Type(v) = state 
and Type(w) = non-state. The root of the graph is a complex node. 

— Status(v) G {unexpanded, expanded, incomplete, unsat, sat}. 

— Label(v) is a finite set of formulas, called the label of v. The label of a 
complex node consists of ABox assertions, while the label of a simple node 
consists of concepts. 

— RFmls(v) is a finite set of formulas, called the set of reduced formulas of v. 



2 If A is empty, we can add a : T to it, where a is a special individual. 
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— DFmls(v) is a finite set of formulas, called the set of disallowed formulas 
of v. 

— StatePred(v) el^Ulnulljis called the state-predecessor of v. It is available 
only when Type(v) = non-state. If v is a non-state and G has no paths 
connecting a state to v then StatePred(v) = null. Otherwise, G has exactly 
one state u that is connected to v via a path not containing any other states. 
In that case, StatePred(v) — u. 

— ATPred{v) E V is called the after-transition-predecessor of v. It is available 
only when Type(v) = non-state. If v is a non-state and t>o = StatePred(v) 
(y^ null) then there is exactly one successor v\ of t>o such that every path 
connecting vq to v must go through v\, and we have that ATPred(v) = v\. 
We define Af terTrans(v) = (ATPred(v) = v). If Af terTrans(v) holds then 
either v has no predecessors (i.e. it is the root of the graph) or it has exactly 
one predecessor u and u is a state. 

— CELabel{v) is a formula called the coming edge label of v. It is available only 
when v is a successor of a state u (and Type(v) = non-state). In that case, we 
have u = StatePred(v), Af terTrans(v) holds, CELabel(v) 6 Label(u), and 

• if SType(u) = simple then 

CELabel(v) is of the form 3R.C and C £ Label(v) 

• else CELabel(v) is of the form a:3R.C and C E Label(v). 
Informally, v was created from u to realize the formula CELabel(v) at u. 

— ConvMethod{v) E {0, 1} is called the converse method of v. It is available 
only when Type(v) = state. 

— FmlsRC '(v) is a set of formulas, called the set of formulas required by con- 
verse for v. It is available only when Type(v) = state and will be used only 
when ConvMethod(v) = 0. 

— AltFmlSetsSC (v) is a set of sets of formulas, called the set of alternative sets 
of formulas suggested by converse for v. It is available only when Type(v) — 
state and will be used only when ConvMethodiy) = 1. 

— AltFmlSetsSCP(v) is a set of sets of formulas, called the set of alternative 
sets of formulas suggested by converse for the predecessor of v. It is available 
only when v has a predecessor being a state and will be used only when 
ConvMethod(v) = 1. 

We define 



AFmls(u) = Label(v) U RFmls(v) 
NDFmls(u) = {lp\ipE DFmls(v)} 
FullLabel(v) = AFmls(w) U NDFmls(w) 




The sets AFmls(w), NDFmls(w), and FullLabel(v) are respectively called the 
available formulas of v, the negations of the formulas disallowed at v, and the 
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[ X contains no concepts of the 

(3) r x rT'''lrx r if form 3KD and - for1 ^^' 



l,«:(CnD) , X, a: (CUD) , X, a:\fS.C 



(V) 



X, R(a,b) 



X, R(a,b), Trans(X, a, R,b), Trans(X, b, R~ , a) 



v ^ D „ -in ( X contains no assertions of the 

(3 ) if < form a:3R.D and, for 1 < « < fc, 

Ci,X u Tb ... &C fc ,X fc ,T lx i =T*ans w (X,a i ,.Ri) 



Table 1. Some rules of the tableau calculus Cs-«x 



full label of v. In an "and-or" graph, states play the role of "and" -nodes, while 
non-states play the role of "or"-nodes. 

By the local graph of a state v we mean the subgraph of G consisting of all 
the path starting from v and not containing any other states. Similarly, by the 
local graph of a non-state v we mean the subgraph of G consisting of all the 
path starting from v and not containing any states. 

We apply global state caching: if v\ and v 2 are different states then 
Label(vi) ^ Label(v 2 ) or RFmls{vi) ^ RFmls(v 2 ) or DFmls(vi) ^ DFmls(v 2 ). 
If v is a non-state such that AfterTrans(v) holds then we also apply global 
caching for the local graph of v. if w\ and w 2 arc different nodes of the lo- 
cal graph of v then Label(w\) ^ Label(w 2 ) or RFmls{wi) ^ RFmls(w 2 ) or 
DFmls(wi) ^ DFmls(w 2 ). 

Our calculus Csnx for the description logic SHX will be specified, amongst 
others, by a finite set of tableau rules, which are used to expand nodes of 
tableaux. A tableau rule is specified with the following information: 

— the kind of the rule: an "and" -rule or an "or" -rule 

— the conditions for applicability of the rule (if any) 

— the priority of the rule 

— the number of successors of a node resulting from applying the rule to it, 
and the way to compute their contents. 
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Function NewSucc(u, type, sType, ceLabel, label, rFmls, dFmls) 

Global data: a rooted graph (V, E, v). 
Purpose: create a new successor for v. 

1 create a new node w, V :— V U {w}, if v ^ null then E := E U {(v, w)}; 

2 Type(w) := type, SType(w) := sType, Status(w) := unexpanded; 

3 Label(w) := label, RFmls(w) := rFmls, DFmls(w) := dFmls; 

4 if type — non -state then 

5 if v = null or Type(v) = state then StatePred(w) := v, ATPred(w) := w 

6 else StatePred(w) := StatePred(v), ATPred(w) := ATPred(v); 

7 if Type(v) = state then CELabel(w) := ceLabel, AltFmlSetsSCP(w) := 

8 else ConvMethod(w) := 0, FmlsRC{w) := 0, AltFmlSetsSC(w) := 

9 return w 



Function FindProxy(type, sType, v\, label, rFmls, dFmls) 

Global data: a rooted graph (V, E, v). 

1 if type = state then W := V else W := the nodes of the local graph of vi; 

2 if there exists w £ W such that Type(w) — type and SType(w) = sType and 
Label(w) — label and RFmls(w) = rFmls and DFmls(w) = dFmls then 
return w 

3 else return null 



Function ConToSucc(w, type, sType, ceLabel, label, rFmls, dFmls) 
Global data: a rooted graph (V, E, v). 

Purpose: connect utoa successor, which is created if necessary. 

1 if type — state then vi := null else vi := ATPred(v) 

2 w :— FindProxj(type, sType,vi, label, rFmls, dFmls); 

3 if w null then E := E U {(v, w)} 

4 else w := NewSucc(t>, type, sType, ceLabel, label, rFmls, dFmls); 

5 return w 



Function TUnsat(u) 

l return (A. £ Label(v) or there exists {ifi,Tp} C Label(v)) 



Function TSat(u) 

l return (Status(v) = unexpanded and no rule except (conv) is applicable to v) 



Function ToExpand 
Global data: a rooted graph (V, E, v). 

1 if there exists a node v 6 V with Status (v) = unexpanded then return v 

2 else return null 



Tableau rules are usually written downwards, with a set of formulas above 
the line as the premise, which represents the label of the node to which the 
rule is applied, and a number of sets of formulas below the line as the (possible) 
conclusions, which represent the labels of the successor nodes resulting from the 
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Procedure Apply(p, v) 



Global data: a rooted graph (V,E, v). 

Input: a rule p and a node v £ V s.t. if p 7^ (com;) then Status(v) = unexpanded 

else Status(v) — expanded and Bef oreFormingState(?;) holds. 
Purpose: applying the tableau rule p to the node v. 

1 if p = (forming -state) then 

2 I ConToSucc(i;, state, SType(v), null, Label(v), RFmls(v), DFmls(v)) 

3 else if p = (conv) then ApplyConvRule (v) II defined on page [9] 



4 else if p £ {(3), (3')} then 



ApplyTransRule (p, v); II defined on page [9] 
if Status(v) — {incomplete, unsat, sat} then 
I PropagateStatus(u), return 



8 else 

9 let Xi , . . . , Xk be the possible conclusions of the rule; 

10 if p e {(H), (H'), (V)} then Y := RFmls(v) 

11 else Y := RFmls(v) U {the principal formula of p}; 

12 foreach 1 < i < k do 

ConToSuccfu, non-state, SType(v), null, Xi, Y, DFmls(v)) 

13 Status(v) := expanded; 

14 foreach successor w of v with Status(w) $5 {incomplete, unsat, sat} do 

15 
16 
17 
18 
19 
20 
21 
22 
23 

24 
25 
26 
27 
28 
29 
30 
31 



if TUnsat(it)) then Status(w) := unsat 
else if Type(w) — non -state then 

wo := StatePred(w), wi := ATPred(w); 
if SType(vo) = simple then 

let 3R.C be the form of CELabel^x); 
X := Traja.s-iz(Label(w) , R~) \ AFmls(?;o) 
else 

let a:3R.C be the form of C E Label (vi); 
X := TraiLSiz(Label(w) , R~ ,a) \ AFmls(t>o) 

if X ^ then 

if ConvMethod(vo) = then 

FmlsRC(v ) := FmlsRC(vo) U X; 

if X n DFmls(vo) 7^ then Status(vo) := unsat, return 
else if X n DFmls(vo) 7^ then Status(w) := unsat 
else 

AltFmlSetsSCP(vi) := AltFmlSetsSCP(v x ) U {X}; 
Status(w) := incomplete 



else if TSat(™) then Status(w) := sat 

33 UpdateStatus(t;); 

34 if Status(v) G {incomplete, unsat, sat} then PropagateStatus(«) 



application of the rule. Possible conclusions of an "or" -rule are separated by 
|, while conclusions of an "and" -rule are separated by &. If a rule is a unary 
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Procedure ApplyConvRule(w) 



Global data: a rooted graph (V, E, v). 
Purpose: applying the rule (conv) to the node v. 

1 let w be the only successor of v, E :— E \ {(v, w)}; 

2 if ConvMethod(w) = then 
newLabel := Label(v) U FmlsRC(w); 

ConToSucc(u, non-state, SType(v), null, newLabel, RFmls(v), DFmls(v)) 
else 

let {<y2i}, . . . , {</5 n } be all the singleton sets belonging to AltFmlSetsSC (w) , 
and let remaining SetsSC be the set of all the remaining sets; 
foreach 1 < i < n do 

newLabel := Label(v) U {ifii}, 
newDFmls := DFmls(v) U {ipj | 1 < j < i}; 

ConToSucc(u, non-state, SType(v), null, newLabel, RFmls(v), newDFmls) 

Y := | 1 < i < n}; 
foreach X G remaining SetsSC do 

ConToSucc(«, non-state, SType(v), null, Label(v) U 
X, RFmls{v), DFmls(v) U Y) 



Procedure Apply TransRule(p, u) 



Global data: a rooted graph (V, E, v). 

Purpose: applying the transitional rule p, which is (3) or (3'), to the state u. 

1 let Xi, . . . , Xk be all the conclusions of the rule p with Label(u) as the premise; 

2 if p = (3) then 
3 

4 
5 
6 



let BRi.Ci, . . . , 3R k .Ck be the corresponding principal formulas; 
foreach 1 < i < k do 

v :— NewSucc(u, non-state, simple, 3Ri.C\, Xi, 0, 0); 
FmlsRC(u) := FmlsRC(u) U (Trans n (Label(v), R7) \ AFmls(u))} 



7 else 



8 
9 
10 
11 



let ai : 3_Ri.Ci, . . . , a k : 3R k .Ct be the corresponding principal formulas; 
foreach 1 < i < k do 

v :— NewSucc(u, non-state, simple, ai : 3Ri.d, Xi, 0, 0); 
FmlsRC(u) ■— FmlsRC{u) U (Tr<ms n (Label(v), R~,a z ) \ AFmls(w)}) 



12 if FmlsRC(u) n DFmls{u) then Status(u) := unsat; 

13 while Status(u) =fc unsat and there exists a node w in the local graph of u such 
that Status(w) = unexpanded and a unary rule p ^ (forming -state) is 
applicable to w do Apply(p, w); 

14 if Status(u) 7^ unsat then 



15 
16 



if FmlsRC(u) ^ then Status(u) := incomplete 
else ConvMethod(u) := 1 
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Function Tableau(ft, T, A) 



Input: a knowledge base (TZ, T, A) in NNF in the logic SHI. 
Global data: a rooted graph (V,E,v). 

l X :— AU {(a:C) | C £ T and a is an individual occurring in A}; 
1 v := NewSucc(null, non-state, complex, null, X, 0, 0); 

3 if TUnsat(iz) then Status (v) := unsat 

4 else if TSat(f) then Status (y) := sat; 

5 while (« := ToExpand()) =fc null do 
6 
7 



choose a tableau rule p different from (conv) and applicable to v; 
Apply(p, v); II defined on page [8] 

8 return (V, -E, v) 

Procedure UpdateStatus('i;) 

Global data: a rooted graph (V,E,v). 

Input: a node v € V with Status (v) = expanded. 

1 if Kind(u) = or-node then 

2 if some successors of v have status sat then Status(y) := sat 

3 else if all successors of v have status unsat then Status(v) := unsat 

4 else if every successor of v has status incomplete or unsat then 

5 if v has a successor w such that Type(w) = state then 

// w is the only successor of v 

6 Apply((cont>), v) 

7 else Status (v) := incomplete 

8 else // Kind(u) = and-node 

9 if all successors of v have status sat then Status(v) := sat 

10 else if some successors of v have status unsat then Status(v) := unsat 

11 else if v has a successor w with Status (w) = incomplete then 

12 |_ AltFmlSetsSC(v) := AltFmlSetsSCP(w), Status(v) := incomplete 



Procedure PropagateStatus(w) 



Global data: a rooted graph (V, E, v). 

Input: a node v £ V with Status (v) £ {incomplete, unsat, sat}. 

1 foreach predecessor u of v with Status(u) — expanded do 

2 UpdateStatus(M); 

3 if Status(u) £ {incomplete, unsat, sat} then PropagateStatus(it) 



rule (i.e. a rule with only one possible conclusion) or an "and" -rule then its 
conclusions are "firm" and we ignore the word "possible". The meaning of an 
"or" -rule is that if the premise is satisfiable w.r.t. 1Z and T then some of the 
possible conclusions are also satisfiable w.r.t. 1Z and T, while the meaning of 
an "and"-rule is that if the premise is satisfiable w.r.t. 1Z and T then all of the 
conclusions are also satisfiable w.r.t. 1Z and T. 
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Such a representation gives only a part of the specification of the rules. 

We write X, ip or (p, X to denote X U {p}, and write X, Y to denote X \JY. 
Our tableau calculus Csui for SHI w.r.t. the RBox 1Z and the TBox T consists 
of rules which are partially specified in Table [1] together with two special rules 
(forming-state) and (conv). 

The rules (3) and (3') are the only "and"-rules and the only transitional 
rules. The other rules of Csv.1 are "or" -rules, which are also called static rules. 
The transitional rules are used to expand states of tableaux, while the static 
rules are used to expand non-states of tableaux. 

For any rule of Csui except (f or ming- state) and (conv), the distinguished 
formulas of the premise are called the principal formulas of the rule. The rules 
(f or ming- state) and (conv) have no principal formulas. As usually, we assume 
that, for each rule of Csui described in Table [IJ the principal formulas are not 
members of the set X which appears in the premise of the rule. 

Expanding a non-state v of a tableau by a static rule p S {(n), (U), (n'), (U')} 
which uses ip as the principal formula, we put p into the set RFmls(w) of each 
successor w of v. Recall that RFmls(w) is called the set of the reduced formulas 
of w. If w is a non-state, v\ = ATPred(w) and v\, V2, ■ ■ • , Ufc — w is the path (of 
non-states) from v\ to mi, then an occurrence ip € RFmls(w) means there exists 
1 < i < k such that ip G Label (vi) and ip has been reduced at Vi. After that 
reduction, ip was put into RFmls(vi+\) and propagated to RFmls(vk). 

Expanding a simple (resp. complex) state v of a tableau by the transitional 
rule (3) (resp. (3')), each successor Wi of v is created due to a corresponding 
principal formula 3i? J .Ci (resp. ai:3Ri.Ci) of the rule, and RFmls(w) is set to 
the empty set. 

For any state w, every predecessor v of w is always a non-state. Such a node v 
was expanded and connected to w by the static rule (forming- state). The nodes 
v and w correspond to the same element of the domain of the interpretation 
under construction. In other words, the rule (f or ming- state) "transforms" a 
non-state to a state. It guarantees that, if Bef oreFormingState(u) holds then 
v has exactly one successor, which is a state. 

The rule (conv) used for dealing with converses will be discussed shortly. 

The priorities of the rules of Csui are as follows (the bigger, the stronger): 
(□), (|Y), (H), (#'), (V'): 5; (U), (□'): 4; (forming-state): 3; (3), (3'): 2; 
(conv): 1. 

The conditions for applying a rule p 7^ (conv) to a node v are as follows: 

— the rule has Label(v) as the premise (thus, the rules (n), (U), (H), (3) are 
applicable only to simple nodes, and the rules (n'), (□'), (H') 7 (V ), (3') are 
applicable only to complex nodes) 

— all the conditions accompanying with p in Table [T] are satisfied 

— if p is a transitional rule then Type(v) = state 

— if p is a static rule then Type(v) — non-state and 

• if p € {(n), (U), (n'), (U')} then the principal formula of p does not belong 
to RFmls(v), else if p g {(H), (H 1 ), (V )} then the formula occurring in 
the conlusion but not in the premise of p does not belong to AFmls(u) 
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• no static rule with a higher priority is applicable to v. 

We now explain the ways of dealing with converses, i.e., with inverse roles. 

Consider the case when Type(v) = state, SType(v) = simple, 3R.C G Label(v) 
and v corresponds to an element x v G A x of the interpretation X under construc- 
tion. We need to realize the formulas of Label(v) at v so that x v G (Label (v)) x . 
The formula 3R.C is realized at v by making a transition from v to w with 
Label(w) = {C} U 1ra.nsn(Label(v), R) U T. The node w corresponds to an cl- 
ement x w G A x such that (x Vl x w ) G R x and x w G C x . If at some later stage 
we need to make x w G (VR~.D) X (for example, because (Vi?~ .D) G Label(w)) 
then we need to make x v G D x , and hence we need to add D to Label(v) as a 
requirement to be realized at v if D ^ AFmls(u). Similarly, if at some later stage 
we need to make x w G (VS.D) X , where R~ C TC S and 5 o S C S* G ext(JZ), then 
we need to make x v G (VS.D) X , and hence we need to add \/S.D to Label(v) as 
a requirement to be realized at v if V5.Z) ^ AFmls(w). 

— If x v G -D x (where D may be of the form \/S.D') is a requirement but 
D ^ AFmls(v) then we record this by setting ConvMethod(v) :— and 
add D to the set FmlsRC{v). If FmlsRC{v) n DFmls(v) ^ then the 
requirements at w are unrealizable and we set Status(v) := unsat (which 
means FullLabel(w) is unsatisfiable w.r.t. 1Z and T). If FmlsRC(v) ^ 
and FmlsRC(v) n DFmls(v) — then we set Status(v) := incomplete, which 
means the set Label(v) should be extended with FmlsRC (v) if w will be used. 

— Consider the case when the computed set FmlsRC(v) is empty. In this case, 
we set ConvMethodiy) := 1. Each node Wi in the local graph of w is an 
"or" -descendant of w and corresponds to the same x w G A x (for example, if 
C\ U Ci G Label(w) then we may make w an "or" -node with two successors 
w\ and W2 such that C\ G Label(w\) and C2 G Label(w2))- 

• Consider the case (VR~ .D) G Label(wi). Thus, x w G (\IR~ .D) x is one 
of possibly many alternative requirements (because Wi is one of possibly 
many "or" -descendants of w). If Wi should be selected for representing w 
and D £ AFmls(w) then we should add D to Label(v). If D G DFmls(v) 
then we set Status (wi) := unsat, which means the "combination" of v 
and Wi is unsatisfiable w.r.t. 1Z and T. 

• Consider the case when (VS.D) G Label(wi), R~ S and S o S C 
S* G extiJZ). Thus, G i^/S.D) 1 is one of possibly many alternative 
requirements (because Wi is one of possibly many "or" -descendants of 
w). If Wi should be selected for representing w and \/S.D £ AFmls(w) 
then we should add \/S.D to Label(v). If VS.D G DFmls(v) then we 
set Status(wi) := unsat, which means the "combination" of v and Wi is 
unsatisfiable w.r.t. 7?. and T ■ 

If, for X = Tra.ns n (Label(wi), R~) \AFmls(w), we have that X ^ and In 
DFmls(v) — 0, then we add X (as an element) to the set AltFmlSetsSCP(w) 
and set Status(wi) := incomplete, which means that, if the "or" -descendant 
Wi should be selected for representing w then X should be added (as a set) 
to Label(v). 
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Now consider the case when Type(v) = state, SType(v) = complex and 
a:3R.C £ Label (v). It is very similar to the previous one. We need to sat- 
isfy (the ABox) Label(v) in the interpretation I under construction. To sat- 
isfy the formula a : 3R.C in X we make a transition from v to w with 
Label(w) = {C} U Trans^ (La&e/(f ), a, R) U T. The node w corresponds to an 
element x w £ A x such that (a x , x w ) £ R x and x w £ C x . If at some later stage 
we need to make x w £ (VR~ .D) 1 (for example, because (VR~.D) £ Label(wj) 
then we need to make a 1 £ D 1 , and hence we need to add a .D to Label(v) as a 
requirement to be realized at v if (a:D) ^ AFmls(w). Similarly, if at some later 
stage we need to make x w £ (VS.D) X , where R~ C K S and SoSCSg ext(lZ), 
then we need to make a 1 £ (VS.D) X , and hence we need to add a : VS.D to 
Label(v) as a requirement to be realized at v if a:VS.D AFmls(u). 

— If a 1 £ D x (where D may be of the form VS.D') is a requirement but 
(a:D) AFmls(-y) then we record this by setting ConvMethod(v) := and 
add a : D to the set FmlsRC(v). If FmlsRC(v) n DFmls(v) ^ then the 
requirements at v are unrealizable and we set Status(v) := unsat (which 
means FullLabel(w) is unsatisfiable w.r.t. 1Z and T). If FmlsRC(v) ^ 
and FmlsRC (v) n DFmls(v) = then we set Status(v) := incomplete, which 
means the set Label(v) should be extended with FmlsRC (v) if v will be used. 

— Consider the case when the computed set FmlsRC (v) is empty. In this case, 
we set ConvMethod(v) := 1. Each node Wi in the local graph of w is an 
"or" -descendant of w and corresponds to the same x w £ A 1 . 

• Consider the case (VR~ .D) £ Label{wi). Thus, x w £ (Vi? _ .D) x is one 
of possibly many alternative requirements (because Wi is one of possibly 
many "or" -descendants of w). If Wi should be selected for representing 
w and (a : D) ^ AFmls(u) then we should add a : D to Label (v). If 
(a : D) £ DFmls(v) then we set Status{wi) := unsat, which means the 
"combination" of v and Wi is unsatisfiable w.r.t. 1Z and T . 

• Consider the case when (VS.D) £ Label(wi), R~~ Q-r, S and S o S C 
S £ ext(lZ). Thus, x w £ (VS.D) 1 is one of possibly many alternative 
requirements (because Wi is one of possibly many "or" -descendants of 
w). If Wi should be selected for representing w and (a:VS.D) £ AFmls(w) 
then we should add a:VS.D to Label(v). If (a:VS.D) £ DFmls(v) then 
we set Status(wi) := unsat, which means the "combination" of v and Wi 
is unsatisfiable w.r.t. 1Z and T. 

If, for X = Tr ajD.s-iz(Label(wi), R~ , a) \ AFmls(w)}, we have that X ^ 
and X fl DFmls(v) = 0, then we add X (as an element) to the set 
AltFmlSetsSCP(w) and set Status(wi) := incomplete, which means that, if 
the "or" -descendant Wi should be selected for representing w then X should 
be added (as a set) to Label (v). 

When a node w gets status incomplete, unsat or sat, the status of every 
predecessor v of w will be updated as shown in procedure UpdateStatus(w) 
defined on pageHUl In particular: 

— If Type(w) = state and Status(w) = incomplete then 
Bef oreFormingState(u) holds and w is the only successor of v. In 
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this case, the edge (v, w) will be deleted and the node v will be re-expanded 
by the converse rule (conv) as shown in procedure ApplyConvRule given on 
page[9] For the subcase ConvMethod{w) = 0, we connect v to a node with la- 
bel Label(v)U FmlsRC (w). Consider the subcase when ConvMethod(w) = 1. 
Let AUFmlSetsSC (w) = {{^l}, ■ ■ ■ , Wn}, Z\, . . . , Z m }, where Z\, . . . , Z m 
are non-singleton sets. We connect v to successors w\, . . . , w n + m such that: 
for 1 < i < n, Label{wi) = Label{v) U {tfi}, and for n + 1 < i < n + m, 
Label(wi) = Label (v) U Zj. To restrict the search space, for 1 < i < n, we 
add all ^ with 1 < j < i to DFmls(wi). This can be read as: at v either 
allow to have tpi (by adding it to the attribute Label), or disallow ip± (by 
adding it to the attribute DFmls) and allow or disallow (pi, tp% and 
allow (^3, and so on. Similarly, for n + 1 < i < n + m, we add all </?j with 
1 < J < to DFmls (wi). 
— If Type(v) = state (i.e. Kind(w) = and-node) and w has a successor 
w such that Status(w) = incomplete then we set AltFmlSetsSC(v) := 
AltFmlSetsSCP(w) and set Status(v) := incomplete. 

Application of a tableau rule p to a node v is specified by procedure 
Apply(p, v) given on page [S] This procedure uses procedures ApplyConvRule 
and ApplyTransRule given on page|Hl Auxiliary functions arc defined on pagc[7] 
Procedures used for updating and propagating statuses of nodes are defined on 
page [10] The main function Tableau(7\L, T, -4) is also defined on page [TOl It 
returns a rooted "and-or" graph called a Cs-ux-tableau for the knowledge base 
(TZ, T, -4). The root of the graph is a complex node v with Label (u) = AU{(a : C) 
| C £ T and a is an individual occurring in .4}. Also notice that trivial unsatis- 
fiability and satisfiability are checked immediately for each newly created node. 

Example 3.1. This is an example about web pages, taken from [T5] and adapted 
to our calculus. Let 

TZ = {link C path, path o path C path} 

T = {perfect C interesting n V 'path. perfect} 

A = {a:perfect, link{a, b)} 

It can be shown that b is an instance of the concept V link. interesting w.r.t. 
the knowledge base (7Z,T,A), i.e., for every model L of (1Z,T, A), we have 
that b x £ (V link. interesting) 1 . To prove this one can show that the knowledge 
base (TZ, T, A'), where A' — A U {b : Blink .^interesting} , is unsatisfiable. As 
abbreviations, let L — link, P = path, I = interesting, F — perfect, and (f = 
->F U (/ n yP.F). We have 

TZ = {L C P, PoPHP} 
T={p} (in NNF). 
A' = {a:F, L(a,b), b:3L.^I}. 



An "and-or" graph for (TZ,T,A') is presented in Figure [TJ 



< 
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(1): (U'), or 




(3): (n') 




(4): (if') 




a:F, L(a.b), 
6:37,. -.7, 
a: if. b:ip 


a:F, L(a.b), 
b-.BL.^I, b:ip, 
a: III VP.F 


a:F, L(a, b), 
b-.BL.^I, b:ip, 
a: I, a:\/P.F 









(5): (V) 

a:F, L(a, b), 
b:3L.-.I, b-.ip, 
a: I, a:VP.F. 
a:VL.F 




(9): (□') 

a:F, L(a,b), 
b-.BL.^I, 

a : I, a: VP.F, 
a:VL.F, 

b:F, b-.VP.F, 
b:\/L.F, 
b-.IH VP.F 





(7): (□'), or 




(6): (if') 


a:F, L(a, b), 
b-.BL.^I, b:ip, 
a : I, a: VP.F, 

a:VL.F, 
b:F, b-.VP.F, 

b-.VL.F 


a:F. L(a, b), 
b-.BL.^I, b-.ip, 
a: I, a: VP.F, 

a:VL.F, 
b-.F, b-.VP.F 







(10): 
(forming-state) 

a:F, L(a.b), 
6:37,. -.7, 

a: I, a:VP.F. 
a:VL.F, 

b-.F, b-.VP.F, 
b-.VL.F, 

6:7, b-.VP.F 


f 


(11): (3') 




a:F, L(a,b), 
b:BL.^I, 

a: I, a:VP.F, 
a:VL.F, 

b-.F, b-.VP.F, 
b-.VL.F, 

b-.I, b-.VP.F 






(12): (U), or 
-.7, F, VP.F, 









(8): (-LQ 
b-.F, b-.^F, 



(15): (J.) 




(14): (n) 


-.7, F, VP.F, 
I, VP.F 
unsat 


-.7, F, VP.F, 
7 n VP.F 





-.7, F, VP.F, 
^F 
unsat 



Fig. 1. An "and-or" graph for the knowledge base (1Z 7 T 7 A'), where 1Z — {L \— 
P, PoP C P},T={<p}, A' = {a:F, L(a,b), b:3L.^I}, and ip = -.FU(JnVP.F). 
In each node, we display the name of the rule expanding the node and the 
formulas of the node's label. The node (11) is the only state. We have, for 
example, StatePred((15)) = (11), ATPred((W)) = (12) and CELabel((12)) = b: 
3L.^I. 
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Example 3.2. Let 

K = {rCs, r~ C s, s o s C s} 
7" = {3r.(AnVs.^4)} 
-4= {a:T}. 

In Figures [5] and 131 we give an "and-or" graph for the knowledge base (1Z,T,A). 
The nodes are numbered when created and are expanded using DFS (depth-first 
search). At the end the root receives status unsat. Therefore, by Theorem 13.41 
(TZ, T, A) is unsatisfiable. As a consequence, (TZ, T, 0) is also unsatisfiable. < 

Let closure(TZ, T , A) be the union of 

— the set of all formulas C and a : C such that C is a concept occurring in T 
or A as a formula or a subformula and a is an individual occurring in A 

— the set of all formulas VR.C and a:VR.C such that a is an individual occur- 
ring in A and there exists a role S such that R S, S o S C S 1 £ ext(lZ) 
and WS.C is a concept occurring in 7" or ^4 as a formula or a subformula. 

The size of closure(TZ, T, A) is polynomial in the size of (7?., 7", A), where the 
size of a set of formulas (resp. a knowledge base) is the sum of the lengths of its 
formulas (resp. formulas and axioms). 

Lemma 3.3. Procedure Tableau(7?., T, A) runs in 

2 0(n) 

steps and returns a 

rooted "and-or" graph G = (V, E, v) of size 2°("\ where n is the size of 
closure(7Z,T ', A) ■ Furthermore, for every v £ V : 

1. the sets Label (v), RFmls{v) and DFmls(v) are subsets of closure(lZ,T, A) 

2. the local tree of v is a DAG (directed acyclic graph). 

Proof. The assertion Q] should be clear. For the assertion [21 just observe that: 

— if v is expanded by a static rule and w is a successor of v then RFmls(v) C 
RFmls(w) and AFmls(w) C AFmls(w) and DFmls{v) C DFmls(w) 

— if v is expanded by a static rule p £ {{H), (H'), (V ), (conv), 
(/ or ming- state)} and w is a successor of v then RFmls(v) C RFmls(w) 

— if v is expanded by a rule p s {(#), (#')) (V ), (conw)} and w is a successor 
of v then AFmls(w) C AFmls(w). 

Note that, each tableau node is re-expanded at most once, by using the rule 
(conv). It is easy to see that G has size 2°(™) and can be constructed in 2°( n ) 
steps. < 

Theorem 3.4. Let (TZ, T, A) be a knowledge base in NNF of the logic SHX. 
Then procedure Tableau(7?., 7~, *4) runs in exponential time (in the worst case) 
in the size of (TZ, T, A) and returns a rooted "and-or" graph G — (V,E,v) such 
that (1Z,1~,A) is satisfiable iff Status (y) ^ unsat. < 

The complexity issue was addressed by Lemma 13.31 For the remaining asser- 
tion, see the proofs given in the next section. 
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(a) 



(1): {forming-state) 



a :T, a:3r.(An Vs.-.A) 



(b) 



(1): {forming- state) 
i :: T, a: 3r.(A n Vs.-iA) 





(2): 


(3') 


a = " 


, a : 3r. 





(3): 


(n) 


A n Vs.^A 






(4): (if') 


A, Vs.^A 






(5): 


([A]) 



A, Vs.^A, 
Vr.^A, Vr-.^A 



(2): (3') 

a ::T, a : 3r. (A n Vs.-iA) 
incomplete 
ConvMethod = 
FmlsRC : a: A, a:Vs.^A 



(3): 


(n) 


A n Vs.^A 






(4): (ff') 


A, V 


S.-.A 



(5): ([A]) 

A, Vs.^A, 
Vr.^A, Vr~.^A 



Fig. 2. An illustration for Example 13.21 part I. The graph (a) is the "and-or" 
graph constructed until checking "compatibility" of the node (5) w.r.t. to the 
node (2). In each node, we display the name of the rule expanding the node 
and the formulas of the node's label. The node (2) is the only state. We have, 
for example, StatePred((5)) = (2), ATPred((5)) = (3) and CELabel{{3)) = a: 
3r.(A n Vs.-iA). Checking "compatibility" of the node (5) w.r.t. to the node 
(2), Status ((2)) is set to incomplete and FmlsRC {{2)) is set to {A,Vs.->A}. This 
results in the graph (b). The construction is then continued by applying the rule 
(conv) to (1). See Figure |3] for the continuation. 
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(1): (conv) 
a :: T, a: 3r.(A n Vs.-iA) 



(2): (3') 

a :: T, a: 3r.(A n Vs.-iA) 
incomplete 

ConvMethod = 
FmlsRC : a: A, a: Vs. -.A 



(6): (g') 

a ::T, a : 3r.(A n Vs.-iA), 
a: A, a:Vs.ni 



(3): 


(n) 


A n V 


S.-.A 



(4): (£Q 
A, Vs.^A 



(7): (forming-state) 



a ::T, a : 3r.(A n Vs.-iA), 
a: A, a:Vs.nA, 
a:Vr.ni, a:Vr _ .-.A 







(8): 


(3') 


a :: T, a: 3r.(A n Vs.-iA), 
a: A, a:Vs.nA, 
a:Vr.ni, a:Vr~.-.A 



(5): ([A]) 

A, Vs.^A, 
Vr.^A, Vr~.^A 



(9)= (n) 

A n Vs.^A, 
-.A, Vs.^A 



(10) 



A, Vs.^A, ^A 
unsat 



Fig. 3. An illustration for Example 13.21 part II. This is a fully expanded "and- 
or" graph for (1Z,T,A). The node (1) is re-expanded by the rule (conv). As in 
the part I, in each node we display the name of the rule expanding the node and 
the formulas of the node's label. The nodes (2) and (8) are the only states. After 
the node (10) receives status unsat, the nodes (9)-(6) and (1) receive status unsat 
in subsequent steps. 
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4 Proofs of Soundness and Completeness of Csux 
4.1 Soundness 

If X = {d,...,C n } then define Cnj(X) = C x V\ . . . n C n . If X = {a: C u . . . , a: 
Cn} then define Cnj(Jf) = a: (Ci n . . . nC n ). Furthermore, we define NegCnj(X) 
to be the NNF of -.Cnj(Jf), and define NegAll({Xi, . . .,X k }) = {NegCnj(Xi), 
NegCnj(X fc )}. 

Let G be a Cs^x-tableau for (TZ, T, A). For each node v of G with Status(v) G 
{incomplete, unsat, sat}, let DSTimeStamp(v) be the moment at which Status(v) 
was changed to its final value (i.e. determined to be incomplete, unsat or sat). 
DSTimeStamp stands for "determined-status time-stamp" . For each non-state 
v of G, let ETimeStamp(v) be the moment at which v was expanded the last 
timed 

Lemma 4.1. Let G = (V,E,v) be a CsHi-tableau for (TZ,T,A). For every 
v G V: 

1. if Status (v) = unsat then 

(a) case Type(v) — state : FullLabel(t>) is unsatisfiable w.r.t. TZ and T 

(b) case Type(v) = non-state and StatePred(v) — null ; FullLabel(w) is 
unsatisfiable w.r.t. TZ and T 

(c) case Type(v) — non-state, vq = StatePred(v) ^ null and SType(vo) = 
simple: if v\ — ATPred{v) and CELabel(vi) is of the form 3R.C then 
there do not exist any model X of both TZ and 1~ and any elements x, y € 
A 1 such that (x,y) E R 1 , x G (FullLabel(wo)) 1 and y G (Label(v)) x 

(d) case Type(v) = non-state, vq = StatePred(v) ^ null and SType(vo) = 
complex: if v% = ATPred(v) and CELabel(vi) is of the form a : 3R.C 
then there do not exist any model I of (TZ, T, FullLabel(wo)) and any 
element y G A x such that (a x ,y) G R x and y G (Label(v)) x 

2. if Status (v) = incomplete and Type(v) = state then 

(a) case ConvMethod(v) = 0: FullLabel(w) U {NegCn j(FmlsRC(v))} is un- 
satisfiable w.r.t. TZ and T 

(b) case ConvMethod(v) = 1: FullLabel(» U Negkll(AltFmlSetsSC(v)) is 
unsatisfiable w.r.t. TZ and T 

3. if Type(v) — non-state and w±, . . . ,Wk are all the successors of v then, for 
every model I of TZ and every x G A , 

(a) case SType(v) = simple: x G (FullLabel(w)) :r iff there exists 1 < i < k 
such that x G (FullLabel^i)) 2 ' 

(b) case SType(v) = complex: I is a model of FullLabel(u) iff there exists 
1 < i < k such that I is a model of FullLabel(u>i). 



3 Recall that, each non-state may be re-expanded at most once, using the rule (conv), 
and that, each state is expanded at most once. 
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Proof. We prove this lemma by induction on both DSTimeStamp(v) and 
ETimeStamp(v). 

Consider the assertion 3. It should be clear for the cases when the rule 
expanding v is not (conv). So, assume that v was re-expanded by the rule 
(conv) and let w be the only successor of v before the re-expansion. We must 
have that Type(w) = state, Status(w) = incomplete, DSTimeStamp(w) < 
ETimeStamp(v), Label (w) = Label(v), RFmls(w) = RFmls(v) and DFmls(w) = 
DFmls(v). There are the following two cases: 

— Case ConvMethod(w) — 0: By the inductive assumption 2a, FullLabel(w) U 
{NegCnj (FmZsi?C(w;))} is unsatisfiablc w.r.t. TZ and T. It follows that 
FullLabel(v) U {NegCn j(FmlsRC(w))} is unsatisfiable w.r.t. TZ and T. Af- 
ter re-expansion v has only one successor w' , with Label (w') = Label(v) U 
FmlsRC (w), RFmls(w') = RFmls(v) and DFmls{w') = DFmls{v). Hence, 
the assertion 3 holds. 

— Case ConvMethod(w) — 1: By the inductive assumption 2b, FullLabel(w) U 
Negkll(AUFmlSetsSC (w)) is unsatisfiable w.r.t. TZ and T. It follows that 
FullLabel(v) U Negkll(AltFmlSetsSC(w)) is unsatisfiable w.r.t. TZ and T. 
Using this, it can be observed that Steps 5-12 of procedure ApplyConvRule 
guarantees the assertion 3. 

Consider the assertion 1. If Status(v) = unsat because _L € Label(v) or there 
exists {ip^Tp] C Label(v) then FullLabel(u) is clearly unsatisfiable w.r.t. TZ 
and T. So, assume that Label(v) contains neither _L nor a pair {ip,Tp}. 

Consider the assertion la and suppose that Status{v) = unsat and Type{v) — 
state. There are three cases: Status(v) was set to unsat either by Step 27 of 
procedure Apply (with vq = v) or by Step 12 of procedure ApplyTransRule 
(with u = v) or by Step 10 of procedure UpdateStatus. For the first two cases, 
we must have that ConvMethod(v) = and FmlsRC (v) n DFmls(v) ^ 0, which 
implies that FullLabel(u) is unsatisfiablc w.r.t. TZ and T ■ The intuition behind 
the last inference is that FullLabel(u) = AFmls(u) UNDFmls(u) and FmlsRC (v) 
is the set of formulas which must be added to AFmls(u). Consider the third case. 
Thus, v has a successor w with status Status(w) = unsat, Type(w) = non-state 
and DSTimeStamp(w) < DSTimeStamp(v). The inductive assumption lc or Id 
(depending on SType{w)) holds for w (in the place of v). If FullLabel(-y) is 
satisfied in a model I of TZ and T, then I will violate this inductive assumption. 
Hence FullLabel(w) is unsatisfiable w.r.t. TZ and T. 

Consider the assertion lb and suppose that Status(v) = unsat and Type(v) = 
non-state and StatePred(v) = null. Let wi, . . . , w k be all the successors of v. It 
must be that, for every 1 < i < k, Status(wi) — unsat, Type(wi) = non-state, 
StatePred(wi) = null and DSTimeStamp(wi) < DSTimeStamp(v) . By the in- 
ductive assumption lb, for every 1 < % < k, FullLabel(wj) is unsatisfiablc 
w.r.t. TZ and T. By the inductive assumption 3, it follows that FullLabel(w) is 
unsatisfiable w.r.t. TZ and 7". 

Consider the assertions lc and Id and suppose that Status(v) = unsat and 
Type(v) — non-state and StatePred(v) ^ null. There are the following cases: 
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— Case Status(v) was set to unsat by Step 28 of procedure Apply: The condition 
Y n DFmls(vo) ^ of that step implies the assertions lc and Id. 

— Case Status(v) was set to unsat by Step 3 of procedure UpdateStatus: Let 
Wi, . . . ,Wk be all the successors of v. It must be that, for every 1 < i < k, 
Status(wi) = unsat, Type(wi) — non-state, StatePred(wi) = StatePred(v) ^ 
null and DSTimeStamp(wi) < DSTimeStamp(v) . The inductive assump- 
tions lc and Id for w\,...,Wk imply the inductive hypotheses lc and Id 
for v. 

The assertion 2a should be clear. 

Consider the assertion 2b and suppose that Status{v) = incomplete, 
Type(v) = state and ConvMethod(v) = 1. There must exist a successor w of v 
such that Af terTrans7^('u;) holds, Kind(w) = or-node, Status(w) = incomplete, 
and AltFmlSetsSCP(w) = AltFmlSetsSC (v) . Let w\, . . . , Wk be all the nodes in 
the local graph of w such that, for 1 < i < k, Status(wi) = incomplete and when 
Status(wi) became incomplete a set Xi of formulas was added (as an element) into 
AltFmlSetsSCP(w) (i.e. Wi got status incomplete not by propagation). The set- 
ting of Status(wi) and the addition of Xi to AltFmlSetsSCP{w) occur at Steps 30 
and 31 of procedure Apply. We have that AltFmlSetsSCP(w) = {X\, . . . ,Xk}. 
Note that, since Status(w) = incomplete, fc > 1 and every node in the local graph 
of w must have status incomplete or unsat. There are the following two cases: 

— Case SType(v) = simple: Let CELabel(w) — 3R.C. For the sake of 
contradiction, suppose there exists a model I of K and T such that 
(FullLabel(u) U NegAll^tF mlSetsSC^))) 1 is not empty and contains 
an element x. Since CELabel{w) 6 Label(v), there exists y £ A 1 such 
that (x,y) £ R x and y <E C x . Thus, y G (Label (w)) x , and hence 
y e (FullLabel^)) 1 (since RFmls(w) = DFmls(w) = 0). For ev- 
ery node w' in the local graph of w with Status(w') = unsat, we have 
that DSTimeStamp(w') < DSTimeStamp(v), and by the inductive as- 
sumption lc, y £ (Label (w 1 ')) T , and hence y ^ (FullLabel(w')) x . Since 
y G (FullLabel(w)) 1 , by the inductive assumption 3a, it follows that 
there exists 1 < i < k such that y G (FullLabel(u>i)) 1 . Since Xi = 
1ra.nsTi(Label(wi) 7 R~) and (x, y) G R x , it follows that x G X x , which 
contradicts the fact that x G (itegkll(AltFmlSetsSC(v))) x . Therefore 
FullLabel(w) U Negkll(AltFmlSetsSC(v)) must be unsatisfiable w.r.t. TZ 
and T. 

— Case SType(v) = complex: Let CELabel(w) — a : 3R.C. For the sake of 
contradiction, suppose there exists a model X of TZ, T and FullLabel(w) U 
Negkll(AUFmlSetsSC(v)). Since CELabel(w) G Label(v), there exists y G 
A x such that (a x ,y) G R x and y G C x . Thus, y G (Label (w)) x , and 
hence y G (FullLabel(ui)) 1 (since RFmls(w) — DFmls(w) = 0). For 
every node w' in the local graph of w with Status(w') = unsat, we 
have that DSTimeStamp(w') < DSTimeStamp(v) 7 and by the induc- 
tive assumption Id, y £ (Label(w')) x , and hence y ^ (FullLabel(w')) 2: . 
Since y G (FullLabel(ui)) 1 , by the inductive assumption 3a, it follows 
that there exists 1 < i < k such that y G (FullLabel(w i )) 1 . Since 
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Xi = Tra.ns-jz(Label(wi), R ,a) and (a x ,y) G R x , it follows that I 
is a model of (the ABox) Xi, which contradicts the fact that I is a 
model of (the ABox) Negkll(AltFmlSetsSC(v)). Therefore FullLabel(w) U 
Neghll(AltFmlSetsSC (v)) must be unsatisfiable w.r.t. 1Z and T. < 

Corollary 4.2 (Soundness of Csui)- If G — {V,E,v) is a Csux-tableau for 
(IZ,1~,A) and Status{v) = unsat then (TZ,T,A) is unsatisfiable. < 

This corollary follows from the assertion lb of Lemma |4. II 



4.2 Completeness 

Lemma 4.3. Let G = (V, E, v) be a C sm-tableau for (TZ, T, A). Then no node 
with status incomplete is reachable from v. 

Proof. This lemma follows from the observation that, after a state w getting 
status incomplete, all edges coming to w will be deleted (see Step 1 of procedure 
ApplyConvRule). < 

We prove completeness of Csht y i a model graphs. The technique has been 
used in |17|3l9|4|14|13j for other logics. A model graph (also known as a Hintikka 
structure) is a tuple (A,C,£), where: 

— A is a finite set, which contains (amongst others) all individual names (oc- 
curring in the considered ABox) 

— C is a function that maps each element of A to a set of concepts 

— £ is a function that maps each role to a binary relation on A. 

A model graph (A,C,£) is IZ-saturated if every x € A satisfies: 

- if CUD e C(x) then {C,D} C C(x) (1) 

- if C U D e C(x) then C G C(x) or D G C(x) (2) 

- if VS.C G C(x) and R C TC S* then Vi?.C G C(x) (3) 

- if (x, y) G £{R) then Trans TC (C(a;), i?) C C{y) (4) 

- if (a:, y) G f (i?) then Trans TC (C(y), i?") C C(x) (5) 

- if 3R.C G C(x) then there exists y E A s.t. G £(R) and C G C(y)(6) 

A model graph (Z\,C,f) is consistent if no x G A has C(x) containing _L or 
containing both A and ->A for some atomic concept A. 

Given a model graph M = {A, C, £), the IZ-model corresponding to M is the 
interpretation X = (A, - x ) where: 

— a x = a for every individual name a 

— A x = {x G A | A G C(x)} for every concept name A 

— r x = £'(r) for every role name r G R, where £'(R) for R G R U R~ are the 
smallest binary relations on A such that: 

• £{R) C 
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• S'(R-) = (S'iR))- 1 (i.e., (S'(R))- 1 C £'(R~) and ^'(i?"))- 1 C £'(R)) 

• if i? rC TC S then £'(i?) C £'(S) 

• if R o C R g erf(Te) then £'(i?) o £ '(i?) C £'(#). 

Note that the smallest binary relations mentioned above always exist: for each 
R G RUR , initialize £'(R) with £(R); then, while one of the above mentioned 
condition is not satisfied, extend £'(R) for an appropriate R G RUR minimally 
to satisfy the condition. 

Lemma 4.4. If I is the IZ-model corresponding to a consistent IZ-saturated 
model graph (A,C,£), then I is a model ofTZ and, for every x G A and C G C(x), 
we have that x G C x . 

Proof. Clearly, I is a model of 1Z. For the remaining assertion of the lemma, 
we first prove that if (x,y) G R x then Trans^(C(a:), R) C C(y) and 
Trans-fj(C(y), R~) C C{x). We prove this by induction on the timestamp of 
the addition of the pair (x,y) to £'(R) when constructing X from the model 
graph. The base case is when (x, y) G £ (R) and follows from the assumption 
that (A,C,£) is an "/^.-saturated model graph. For induction step, there are the 
following cases: 

— Case (x,y) is added to £'(R) because (y,x) G £'(R~): The induction hy- 
pothesis immediately follows from the inductive assumption. 

— Case (x,y) is added to £'{R) because (x,y) G £'{S) and S R - By j3]), 
we have that Trans7^(C(x), R) C Trans7^(C(a;), S) and Trans7j(C(y), R~) C 
Trans7j(C(y), S* - ). The induction hypothesis follows from these properties 
and the inductive assumption with S replacing R. 

— Case (x,y) is added to £'{R) because R o i? C R G ext(lZ), (x,z) £ f (i?) 
and G £'(R): The induction hypothesis follows from the inductive 
assumption with (x, z) replacing (x, y) and from the inductive assumption 
with (z,y) replacing (x,y). 

The remaining assertion of the lemma can then be proved by induction on 
the structure of C in a straightforward way. < 

Let G = (V, E) be a Csui graph for (1Z, T, A) and v G V be a non-state with 
Status(v) £ {unsat, incomplete}. A saturation path of v is a sequence wo = v, v%, 
. . . , Vk of nodes of G, with fc > 1, such that Type{vk) — state and 

— for every 1 < i < k, Status(vi) £ {unsat, incomplete} 

— for every < i < k, Type(vi) = non-state and (vi,Vi+x) 6 E. 

Observe that each saturation path of v is finite (by the assertion[5]of Lemma [3.3|) . 
Furthermore, if is a non-state with Status(vi) £ {unsat, incomplete} then Vi 
has a successor Vi+i with Status(vi+\) ^ {unsat, incomplete}. Therefore, v has at 
least one saturation path. 

Lemma 4.5 (Completeness of Csux)- Let G = (V,E,v) be a Csm -tableau 
for (TZ,T,A). Suppose that Status(v) ^ unsat. Then (1Z,T,A) is satisfiable. 
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Proof. By Lemma [4.31 Status{v) / incomplete. Hence v has a saturation path 
vq, . . . ,Vk with vq = v. We construct a model graph M = {/\, C, £) as follows: 

1. Let Aq be the set of all individuals occurring in A and set A := A . For each 
a G Z\ , set C(a) to the set of all concepts C such that a:C G AFmls(^), and 
mark a as unresolved. (Each node of M will be marked either as unresolved 
or as resolved.) For each role R, set £{R) :— {(a, 6) | R(a, b) G A}. 

2. While A contains unresolved nodes, take one unresolved node x and do: 

(a) For every concept 3R.C G C(x) do: 

i. If x G A then: 

— Let u = Vk- 

— Let wq be the node of G such that CELabel(wo) = x : 3R.C. 
(Note that C G Label(wo) and Status(wo) £ {unsat, incomplete} 
since Status(vk) £ {unsat, incomplete}.) 

ii. Else: 

— Let u = f(x). (/ is a constructed mapping that associates each 
node of M not belonging to A n with a simple state of G. As 
a maintained property of /, Status(u) ^ {unsat, incomplete}, 
3i?.C G Label(u) and C(x) = AFmls(w).) 

— Let wo be the node of G such that CELabel(wo) — 3R.C. (Note 
that C G Label(wo) and Status(wo) £ {unsat, incomplete} since 
Status(u) ^ {unsat, incomplete}.) 

hi. Let wq, . . . , Wh be a saturation path of wq. 
(Note that Status(wh) £ {unsat, incomplete}.) 

iv. If there does not exist y G Zi \ Aq such that C(y) = AFmls(w/ l ) 
then: add a new node y to A, set C(y) = AFmls(u)fj), mark y as 
unresolved, and set f(y) = w%. (One can consider y as the result of 
sticking together the nodes wq, ■ ■ ■ ,uih of a saturation path of wq. 
The above mentioned properties of / still hold.) 

v. Add the pair (x,y) to £{R). 

(b) Mark x as resolved. 

The above construction terminates and results in a Unite model graph be- 
cause: for every x, x' G A\Aq, x ^ x 1 implies C(x) ^ C(x'), and for every x G A, 
C(x) is a subset of closure(lZ,T,A). 

Note the following remarks for the remaining part of this proof: 

— For any node v of G, RFmls(v) may contain only formulas of the form CnD, 
C U D, a : (C n D), or a : (C U D). Hence, if tp is of the form VR.C, 3R.C, 
a:\IR.C or a:3R.C and tp G AFmls(u) then we must have that tp G Label(v). 

— After executing Step 2(a)iv[ Label(wo) Q AFmls(w/j) = C(y). Hence, if D G 



Label(wo) then Z) G C(y). 

M is a consistent model graph because Status (vk) ^ unsat and if x G Z\ \ Aq 
and u = f(x) then C(x) = AFmls(?/) and Status(u) ^ unsat. 

We show that M satishes all Conditions (H}-© of being a saturated model 
graph. M satisfies Conditions CO)-© because the sequence vq, . . . , Vk is a satu- 
ration path of vq, and at StepEaJ the sequence wq, . . . , Wh is a saturation path 
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of Wo- M satisfies Condition ((6]) because at Step[2al C £ Label(wo), and hence 
CeC(y). 

Consider Condition (|4j: 

- Assume x £ A and (x, y) £ £(R). We show that Trans(C(a;), R) C C(y). 

— Consider the case x £ Aq and VR.D £ C(x). We show that D £ C(y). 
Since VR.D £ C(x), we have that x : VR.D £ Label(v k ). If y £ A 0i then 
R(x,y) £ A (since (x,y) £ £{R)), and hence y.D £ AFmls(ufc) (due to the 
tableau rule (V )), and hence D £ C(y). Assume that y ^ Aq and y is created 



at Step 2(a)iv Since {x:VR.D) belongs to the label of u — v k , by the tableau 
rule (3'), D £ Label(wo), and hence D £ C(y). 

Consider the case x £ A , VS.D £ C(x), R C TC S and S o S C S £ ext(TZ). 
We show that VS.D £ C(y). Since VS.D £ C{x), we have that x : VS.D £ 
Label(v k ). If y £ A , then R(x,y) £ A (since (x,y) £ £{R)), and hence 
y.VS.D £ AFmls(w fc ) (due to the tableau rule (\/')), and hence VS.D £ C{y). 



Assume that y Aq and y is created at Step 2(a)iv Since (x:VS.D) belongs 
to the label of u — v k , by the tableau rule (3'), VS.D £ Label(wo), and hence 
VS.D £C{y). 

— Consider the case x ^ Aq and Step [2a] at which the pair (x,y) is added to 
£{R). 

• Suppose that VR.D £ C(x). We show that D £ C(y). Since VR.D £ C{x) 
and C(x) = AFmls(u), we have that VR.D £ Label (u). By the tableau 
rule (3), it follows that D £ Label(wo), and hence D £ C(y). 

• Suppose that VS.D £ C(x), R ^ n S and S o S C S £ ext(TZ). We 
show that VS.D £ C(y). Since VS.D £ C(x) and C(x) = AFmls(u), we 
have that VS.D £ Label(u). By the tableau rule (3), it follows that 
VS.D £ Labeliwa), and hence VS.D £ C(y). 

Consider Condition ([5]): 

— Assume y £ A and (x, y) £ £{R). We show that Trans(C(y), R~) £ C(x). 

— Consider the case y £ Aq. We must have that x £ Aq and R(x, y) £ A. 

• If VRr.D £ C(y) then y.VRr.D £ Label(v k ), which implies that x:D £ 
AFmls(i>fc) (by the tableau rule (V )), and hence D £ C(x). 

• If VS.D £ C(y), R- E K S and S o S C S £ ext(TZ) then y : VS.D £ 
Label(y k ), which implies that x:VS.D £ AFmls(wfe) (by the tableau rule 
(V')), and hence VS.D eC{x). 

— Consider the case y ^ Aq and Step [2a] at which the pair (x, y) is added to 
£{R). 

• Suppose that VR~.D £ C(y). We show that D £ C{x). Since VR~.D £ 
C(y), we have that VR~ .D £ Label(wh). Since Status(wh) ^ {unsat, 
incomplete}, we must have that: 

* if u is a simple node then x ^ Aq and D £ AFmls(u), and hence 
D £ C{x) 

* else u = v k , x £ Aq and x:D £ AFmls(u), and hence D £ C(x). 

• Suppose that VS.D £ C(y), R~ C K S and S o S C S £ ext(K). We show 
that VS.D £ C{x). Since VS.D £ C{y), we have that VS.D £ Label(w h ). 
Since Status(wh) £ {unsat, incomplete}, we must have that: 
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* if u is a simple node then x Aq and VS.D G AFmls(u), and hence 
VS.D G C{x) 

* else u = Vfc, a; G Z\o and xiVS'.-D G AFmls(u), and hence VS.!) G C(ie). 
Therefore M is a consistent saturated model graph. 

By the definition of Csni graphs for (1Z, T, A) and the construction of M: if 
(a:C) G A then C G C(a); if R{a,b) G then (a,b) G S(R); and T C C(o) for all 
a G Zio- We also have that T C C(x) for all a; G Z\ \ Z\o- Hence, by Lemma T4.41 
the interpretation corresponding to M is a model of (7?., T, -4). < 

5 Conclusions 

We have given the first cut-free ExpTime (optimal) tableau decision procedure 
for checking satisfiability of a knowledge base in the description logic SHI. Our 
decision procedure is novel: in contrast to 4 5 6, it deals also with ABoxes; in 
contrast to [4116] . it does not use cuts; in contrast to [15114] . it deals also with 
inverse roles; and in contrast to [11], it deals also with transitive roles and hierar- 
chies of roles. The procedure can be implemented with various optimizations as 
in |10] to give an efficient complexity-optimal program for checking satisfiability 
of a knowledge base in the popular DL SHI. We intend to extend our methods 
for other DLs. 
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